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Abstract 

The cut-elimination method CERES (for first- and higher-order clas- 
sical logic) is based on the notion of a characteristic clause set, which 
is extracted from an LK-proof and is always unsatisfiable. A resolution 
refutation of this clause set can be used as a skeleton for a proof with 
atomic cuts only (atomic cut normal form). This is achieved by replacing 
clauses from the resolution refutation by the corresponding projections of 
the original proof. 

We present a generalization of CERES (called CERESs) to first-order 
proof schemata and define a schematic version of the sequent calculus 
called LKSg, and a notion of proof schema based on primitive recursive 
definitions. A method is developed to extract schematic characteristic 
clause sets and schematic projections from these proof schemata. We 
also define a schematic resolution calculus for refutation of schemata of 
clause sets, which can be applied to refute the schematic characteristic 
clause sets. Finally the projection schemata and resolution schemata are 
plugged together and a schematic representation of the atomic cut nor- 
mal forms is obtained. A major benefit of CERESs is the extension of 
cut-elimination to inductively defined proofs; we compare CERESs with 
standard calculi using induction rules and demonstrate that CERESs is 
capable of performing cut-elimination where traditional methods fail. The 
algorithmic handling of CERESs is supported by a recent extension of the 
CERES system. 

Keywords: Cut-elimination, induction, schemata, resolution. 



1 Introduction 

Cut-elimination was originally introduced by G. Gentzen in [10] as a theoret- 
ical tool from which results like decidability and consistency could be proven. 
Cut-free proofs are computationally explicit objects from which interesting infor- 
mation such as Herbrand disjunctions and interpolants can be easily extracted. 
When viewing formal proofs as a model for mathematical proofs, cut-elimination 
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corresponds to the removal of lemmas, which leads to interesting applications 
(such as one described below). 

For such applications to mathematical proofs, the cut-elimination method 
CERES (cut-elimination by resolution) was developed. It essentially reduces 
cut-elimination for a proof tt to a theorem proving problem: the refutation of 
the characteristic clause set CL(7r). Given a resolution refutation 7 of CL(7r), an 
essentially cut-free proof can be constructed by a proof-theoretic transformation. 

It is well-known that cut-elimination in standard calculi of arithmetic, con- 
taining an induction rule, is impossible in general [12] (see also [T^J [3 [T5] for 
other approaches to inductive reasoning using induction rules). In fact, if (p is 
a proof of a sequent S*: F h Vx.A(x), where an induction rule occurs over a cut, 
the cut cannot be shifted over the induction rule and thus cannot be eliminated. 
This is not a feature of a specific cut-elimination method, but ,even in princi- 
ple, inductive proofs require lemmata which cannot be eliminated. When we 
consider, on the other hand, the infinite sequence of proofs of ; F h A{n), 
every of these proofs enjoys cut-elimination. One could hope that, with a suffi- 
ciently nice finite description of the infinite sequence (pn-, sl finite description of 
a sequence of corresponding cut-free proofs comes within reach. The subject of 
this paper is to find appropriate finite representations of such proof sequences 
and to develop a formalism to represent sequences of corresponding cut-free 
proofs. It turned out that, to this aim, the method CERES (cut-elimination 
by resolution) is more suitable than the traditional reductive method. Via the 
above transformation we obtain a method of cut-elimination for inductive proofs, 
which is impossible in ordinary arithmetic calculi. The approach to describing 
infinite sequences of proofs we take will be based on proof links which serve as 
formal placeholders for proofs. Related approaches are found in the literature 
on cyclic proofs [131 [3] . 

The present work was also motivated by an application of CERES to (a 
formalization of) a mathematical proof: Fiirstenberg's proof of the infinity of 
primes [TJ [J. The proof was formalized as a sequence of proofs ipn showing 
that the assumption that there exist exactly n primes is contradictory. The 
application was performed in a semi-automated way: CL^ipn) was computed 
for some small values of n and from this, a general schema CL(iy9„) was con- 
structed and subsequently analyzed by hand. The analysis finally showed that 
from Fiirstenberg's proof, which makes use of topological concepts, Euclid's 
elementary proof could be obtained by cut-elimination. 

The analysis of the Fiirstenberg proof described above reveals the need for 
the development of a formal language for handling schemata. First of all one can 
compute the schema CL{(pn) directly from the specification of the proofs (y9„, 
thus paving the way for formal verification of schematic cut-elimination. Formal 
schematic resolution calculi could provide a tool for interactively developing and 
verifying refutations of clause schemata. Furthermore, on the basis of these 
definitions, software tools for cut-elimination in the presence of induction can 
be developed. 

This paper is structured in the following way: In Section [3] we give a short 
description of the method CERES for first-order logic. In Section|4]we define an 
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inductive proof v? of a sequent S' : F h \/x.A{x) not admitting cut-elimination and 
show informally, how we can obtain a uniform description of the proofs ipn and of 
the corresponding sequence of cut-free proofs. The rest of the paper is devoted 
to the development of a formal machinery realizing the methodology described 
above. In Sections [S] and [5] we introduce schematic first-order languages for for- 
mulas and proofs. In Scction[7]we introduce the concept of clause-schemata and 
clause-set schemata and develop a schematic resolution calculus. In Section [8] 
we extend the first-order CERES method to proof schemata. 



2 Notations and Definitions 

Our notions of proof will all be based on the usual classical sequent calculus LK: 
An expression of the form F h A, where F and A are multisets of formulas, is 
called a sequent. 

We define some simple operations on sequents: let S* : F h A and S' : 11 h A 
be sequents; we define S o S' (the merge of S and S') as F, 11 h A, A. Let S and 
<S' be sets of sequents then 

SxS' = {SoS' \S eS,S' e S'}. 

The rules of the sequent calculus LK for first-order logic are the following: 

1. Logical rules: 

• -1 introduction 



FhA,A A,FhA 



• A introduction 



A: U and , . ' ^ , ^ A: ;2 



AAB,r\- A AAS,Fh A 

FhA,A nhA,S 



F,nh a,a,aas 

V introduction 



A: 



A,rh A 



s,nh A 



^VS,F,nh A,A 



V: I 



F h A, A 
Fh A,AVB 



V: rl 



and 



F h A,B 
Fh A,AVB 



V: r2 



• D introduction 
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rhA,A B,UhA J A,T\-A,B 

^■■l and ^ ' , ' D : r 



ADB,r,n\-A,A rhA,ADB 
• V introduction 



■ Vir and , , \ \ ^. . V: / 



rhA,Va;A(a;) Vx-A(x),rhA 

where a is a variable of appropriate sort not occuring in F, A, A{x). 
• 3 introduction 

rhA,A(t) , A(a),rhA 

3:r and ^ \ Z ^ ^ , . 3:1 



ThA,3xA{x) 3a;A(x),rhA 

where a is a variable of appropriate sort not occuring in F, A, A{x). 
2. Structural rules: 

• Weakening rules: 

FhA , , FhA 

■ w: I and 



A, FhA FhA, A 

Contraction rules: 



^,A,FhA J FhA, A, A 

c: I and — — — - — - — c: r 



A,rhA " FhA, A 

• Cut rule: 

FhA, A ^,nhA 

— cut 



F,nh A,A 

LK-proofs are endowed with an ancestor relation on occurrences of formulas in 
a natural way (for a definition see [5]). We now consider two extensions of LK; 
the first one contains an equality rule which makes the notation of mathematical 
proofs more practical, the second extension is by the induction rule. 

Let £ be an equational theory (i.e. a finite set of equations). We define the 
rule 

S[t] , 
S[t'] 

with the condition that £ \= t = t' and call the corresponding extension of LK 
LKg. Note that, without restrictions on £, the applicability of the rule £ is 
undecidable in general. However, in our paper, the equational theories consist 
of equations which can be oriented to terminating and confluent rewrite systems 
and thus are decidable. 

Finally we extend the language of LKg by the language of arithmetic and 
write uj for the sort of natural numbers. The induction rule is defined as 
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A{k),r^ A,A{k + l) 
A(0),rh A,A(t) 



where k is a variable of sort a;, f is a term of sort w, and k does not occur 
in r, A,^(0). A{k) is called the induction invariant. The resulting calculus is 
denoted by LKIf. 

Consider one of the calculi defined above. A proof is a tree where the nodes 
arc labeled by sequent occurrences and edges are labeled by rules in the usual 
way. A proof of S' is a proof with root node S. Let A he a, set of sequents; a 
proof if of S from A is a, proof of S where all leaves of ip belong to A. If not 
stated otherwise A is defined as the set of sequents of the form A\- Afov atomic 
formulas A over the underlying syntax. Atomic sequents are called clauses. 

A proof ip is called cut-free if the cut rule does not occur in (p. (p is called 
an ACNF (atomic cut normal form) if all cuts are on atomic formulas only. 

3 The CERES Method for First-Order Logic 

The cut-elimination method defined by G. Gcntzcn in his famous paper |10j is 
based on proof rewriting. This rewriting takes place locally (on a cut-inference 
in the proof) without taking into account the overall structure of the proof. As 
a consequence, the method (though elegant and of theoretical importance) is 
redundant and inefficient as a tool for analyzing mathematical proofs. 

In [SI [6] the method CERES (Cut-Elimination by RESolution) was defined 
which takes into account the global structure of a proof ip with cut; this global 
structure is represented as a quantifier-free formula generally represented as a 
clause-set term Q{(p) (evaluating to sets of clauses CL(<p). It can be shown that 
CL{ip) is always unsatisfiable. A resolution refutation p of CL{ip) then defines 
a skeleton of an ACNF of the proof (p. The final step consists in inserting so- 
called proof projections into p to obtain an ACNF of p. The single steps of the 
method are illustrated in more detail below. 

Definition 3.1 (clause-set term). Clause set terms arc binary terms defined as 

• If C is a clause then [C] is a clause-set term. 

• If ti and t2 arc clause-set terms then ti <2 and ti ® t2 are clause-set 
terms. 

Definition 3.2 (semantics of clause-set terms). The mapping | | maps clause- 
set terms into sets of clauses by 

• \[C]\ = {C}, 

• |ii ©t2| = U \t2\, 

• |tl ®t2| = X \t2\. 
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The first step of CERES consists in the definition of a clause-set term cor- 
responding to the sub-derivations of an LK-derivation ending in a cut. In 
particular we focus on derivations of the cut formulas themselves, i.e. on the 
derivation of formulas having no successors in the end-sequent. 

Definition 3.3 (characteristic term). Let if be an LK-derivation of S and let 
be the set of all occurrences of cut formulas in tp. Let p be an inference in Lp. 
We define the clause-set term Qpif) inductively: 

• if p is an axiom S", let S" be the subsequent of S" consisting of all atoms 
which arc ancestors of an occurrence in f2, then 6p(</5) — [S"]. 

• if p is a unary rule with immediate predecessor p' , then Qp{ip) = Qpi{ip). 

• if p is a binary rule with immediate predecessors pi , /O2 , then 

— if the auxiliary formulas of p are ancestors of VI, then Qpif) = 

0piM©ep2(v), 

- otherwise 6p(v?) = 6pi {'p) ® ("ys)- 

Note that, in a binary inference, either both auxiliary formulas arc ancestors of 
Q, or none of them. 

Finally the characteristic term Q{'p) is defined as Qpg{tp) where po is the last 
inference of 

Definition 3.4 (characteristic clause set). Let ip be an LK-derivation and 6(v) 
be the characteristic term of p. Then CL((p). for CL((/3) = |0((y9)|. is called the 
characteristic clause set of (p. 

Example 3.1. Let ip be the derivation (for u,v free variables, a a constant 
symbol) 



{yx){^P{x)yQ{x))h{3y)Q{y) 
where ipi is the LK-derivation; 

P{uY^Q{u)\P{u) 



cut 



r 



^Pju), Pju)* h Q{u)* Qju), Pju)* h Q{u)* 

P{u)\^P{u)VQ{u)hQ{uy "^-^ 

" r 



-P(ii) V Q{u) h -P(w)*, Q{u)* 
^Pju) V Qju) h i^Pju) V Q{u))\Q{u)* ^ • 
nP(u) V Qju) h i^Pju) V Q{u))\ i^Pju) V Qju))* ^ ; 
^P{u)VQ{u)h {^P{u)\/Q{u)y 

3 : r 



^P{u)VQiu)h{3y)i^Piu)WQiy)y 
(yx){^P{x) V Q{x)) h {3y){^P{u) V Q{y)y ^ 'j 
iVx){^P{x) V Q{x)) h {Vx){3y){^P{x) V Q(y))* ^ ' 
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and Lp2 is: 

hQ{v),P{aY 

^Pjay h Q{v) ^ ■ Q{vr h Q{v) 
{^P{a)VQ{v)rhQ(v) 
{^P{a)VQ{v)r\-{3y)Q{y) ^ ''^ 
{3y)i^P{a)WQiy)rhi3y)Q{y) 
{Vx){3y){^Pix) V Q{y)r h {3y)Q{y) ^ ' 

Let be the set of the two occurrences of the cut formula in ip. The ancestors 
of O are marked by We compute the characteristic term 

From the ^-marks in ip wc first get the clause-set terms corresponding to the 
initial sequcnts: 

Xi = [P{u) h Q{u)], X2 = [P{u) h Q{u)], X3 = [h P{a)], X4 = [Q{v) h]. 

The leftmost-uppermost inference in ipi is unary and thus the clause term Xi 
corresponding to this position does not change. The first binary inference in (^1 
(it is V : /) takes place on non-ancestors of 51 the auxiliary formulas of the 
inference are not marked by *. Consequently we obtain the term 

Yi = [P{u) h Q{u)] ® [P{u) h Q{u)]. 

The following inferences in tpi are all unary and so we obtain 

for ui being the position of the end sequent of ipi in ip. 

Again the uppermost-leftmost inference in p2 is unary and thus X3 does 
not change. The first binary inference in p2 takes place on ancestors of (the 
auxiliary formulas are ^-ed) and we have to apply the © to X3, X4. So we get 

Y2 = [h- P{a)]®[Q{v) H- 

Like in (pi all following inferences in ip2 are unary leaving the clause-set term 
unchanged. Let z/2 be the occurrence of the end-sequent of p2 in </5- Then the 
corresponding clause term is 

ei^)/iy2 = Y2. 

The last inference (cut) in (p takes place on ancestors of Q and we have to apply 
© again. This eventually yields the characteristic term 

e(^) = Yi©y2 = 

([P(u) h Qiu)] ® [Piu) h Qiu)]) © ([h P(a)] © [Q{v) h]). 
For the characteristic clause set we obtain 

CL(^) = 16(^)1 = {P{u),P{u) h Q{u),Q{u)- h P{a); Q{v) h}. 
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It is easy to verify that the set of characteristic clauses CL((^) constructed 
in the example above is unsatisfiable. This is not merely a coincidence, but a 
general principle expressed in the next proposition. 

Proposition 3.1. Let Lp be an IjK.- derivation. Then CL((^) is unsatisfiable. 
Proof. In 0. □ 

Let be a deduction of S": F h A and CL{ip) be the characteristic clause 
set of if. Then CL(iy9) is unsatisfiable and, by the completeness of resolution 
(see [13]), there exists a resolution refutation 7 of CL((p). By applying a ground 
projection to 7 we obtain a ground resolution refutation 7' of CL(i^); by our 
definition of resolution 7' is also an AC-deduction of h from (ground instances 
of) CL((^). This deduction 7' may serve as a skeleton of an AC-deduction ij) of 
r h A itself. The construction of ip from 7' is based on projections replacing 
(/3 by cut-free deductions v'(C) of P,r h A,(5 for clauses C : F h Q in CL((/3). 
We merely give an informal description of the projections, for details we refer to 
[SJIS]. Roughly speaking, the projections of the proof are obtained by skipping 
all the inferences leading to a cut. As a "residue" we obtain a characteristic 
clause in the end sequent. Thus a projection is a cut-free derivation of the end 
sequent S + some atomic formulas in S. For the application of projections it is 
vital to have a skolemized end sequent, otherwise eigenvariable conditions could 
be violated. 

The construction of ip{C) is illustrated below. 

Example 3.2. Let ip be the proof of the sequent 

S : (yx){^P{x)y Q{x))^ {3y)Q{y) 

as defined in Example 13.11 We have shown that 

GU^)^{P{u),P{u)^Q{u),Q{u)- hP{a)- Qiv)h}. 

We now define <^(Ci), the "projection" of to Ci : P{u), P{u) h Q{u), Q{u): 
The problem can be reduced to a projection in ipi because the last inference in 

ip is a, cut and 

e((^)/i^i = [P{u) h Q{u)] ® [P{u) h Q{u)]. 

By skipping all inferences in ipi leading to the cut formulas we obtain the de- 
duction 

P{u)hP{u),Q{u) 

^P{u), P{u) h Qju) " • Q{u), P{u) h Q{u) 

Pju), Pju), -.Pju) V Q{u) h Q{u), Q{u) J -j 
P{u), P{u), {W){^P{x) V Q{x}) h Q{u),Q{u) ^ ■ 
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In order to obtain the end sequent we only need an additional weakening 
and (p{Ci) = 

P{u)h P{u),Q{u) 



^Pju), P{u) h Q{u) • Q{u), P{u) h Q{u) 

P{u), P{u), ^P{u) V Q{u) h Q{u), Q{u) J ■ ^ 

P(u),P{u), {W}{^P{x) V Q{x)) h Q{u),Q{u) ^ ■ 

w : r 

P{u), P{u), {yx){^P{x) V Q{x)) h {3y)Q{y),Q{u), Q{u) 

For C2 = h P{a) we obtain the projection ip{C2)'- 

^P{a),Q{v) 
h P(a), (3y)Q(y) ^ ^ 

w : J 



(Vx)(-P(x) vg(.T)) h (3y)Q(y),P(a) 
Similarly we obtain (fiC^): 

Q{v) h Q(z;) ^ 



w : I 



{yx){-^P{x)WQ{x)),Q{v) h {3y)Q{y) 

Let be a proof of S s.t. (/s is skolcmized and let 7 be a resolution refutation 
of the (unsatisfiable) set of clauses CL((^). Then 7 can be transformed into a 
deduction 93(7) of S s.t. (^(7) is a proof with atomic cuts, thus an AC-normal 
form of Lp. (p{'y) is constructed from 7 simply by replacing the resolution steps 
by the corresponding proof projections. The construction of ip{"f) is the essential 
part of the method CERES (the final elimination of atomic cuts is inessential). 
The resolution refutation 7 can be considered as the characteristic part of ip{"f) 
representing the essential result of AC-normalization. Below we give an example 
of a construction of ip{'^), for details we refer to [SJE] again. 

Example 3.3. Let (p be the proof of 

5: {Vx){^P{x)WQ{x))h{3y)Q{y) 
as defined in Example 13.11 and in Example 13.21 Then 

CL{ip) = {Ci : P{u),P{u) h Q{u),Q{u); C2 : h P(a); C3 : Q{v) h}. 
First we define a resolution refutation S of CL(iy9): 

hP(a) P{u),P{u)^ Q{u),Q{u) 

hQ(a),Q(a) ^ Q{v) h 

1 R 



and a corresponding ground refutation 7: 

hP(a) P{a),P{a)h Q{a),Q{a) 



R 



Q(a),g(a) g(a)K 
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The ground substitution defining the ground projection is ct : {u <— a, w a}. 

Let xi = X2 = ^{C2)<J and X3 = '^^(C's)'''- Moreover let us write B 

for {\/x){-^P{x) V Q(x)) and C for {3y)Q{y). 

Then <y9(7) is of the form 

(X2) (Xi) 
B h C, P(a) P(a), B h C, Q(a) 

B,Bh C,C,Q{a) Q{a),B^C 



B,B,Bh C, C, C 
BhC,C,C 
B^C ^ ■ 



c : r 

r* 



4 CERES and Induction 

We now turn our attention to the issue of cut-ehmination in the presence of 
induction. 

Let us consider the sequent S: 

{^x){P{x) D P(/(x))) h (Vn)(Va;)((P(/(n,x)) D P{g{n,x))) D {P{x) D P(ff(n,x)))) 

where g is a binary function symbol, / is unary one and 

£ = {/(O, x) = x, fisin), x) = /(/(n, x))}. 

Obviously, S cannot be proven without induction, which can be shown via the 
fact that S does not have a Herbrand sequent (w.r.t. the theory £) . That 
means that there exists no proof of S in LKf. In fact we need the following 
inductive lemma: 

(Vx)(P(x) D P{f{x))) h (Vn)(Vx)(P(x) D P{f{n,x))). 

A proof "0 of this inductive lemma in LKIf could be: 

r.,(yx){P{x) D P{f\a,x))) h {Vx)iPix) D P(/(s(q), a:))) 

~ ^'"'f^ 

(V-i) r,{\/x){P{x) D p{f{o,x))) h {yx){p(x) D Pif{'r,x))) ^ 

h (Vx)(P{x) D P(/(0, x))) r. {yx)(P{x) D P(/(0, x))) h {V7i)(Vx){P{x) D P{f{n, x))) 

cut 

{Vx){P{x) D P(/(a;))) h {Vn){\/x){P{x) D P(f{n,x))) 

where F — {yx){P{x) D P{f{x))). The proofs ipi and ip2 are easily defined; 
ipi is: 

P{h0,u)) h P{f{0,u)) ^ 

P{u) h P(/(0,u)) 

D : r 

h P(m) D P(/(0,n)) ^ 

h (Va;)(P(x) D P(/(0,2;))) 
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and "02 is: 



P(/(s(a),n))hP(/(s(a),«)) ^ 

P(/(a, u)) h P{f(a, u)) Pififja, u))) h P(/(s(a), «)) ^ 

P(/(a,u)) D P(/(/(a,«))),P(/(a,^x)) hP(/X«),«)) ^ ' 

P(«)l-P(«) iVx)iP{x)D Pif{x))),Pif(a,u))\- P{fis{a),u)) 

z ; D- I 

P{u), {yx){P{x) D Pjfjx))), P(u) D P(/(a, u)) h P{f{s{a),u)) ^ ^ 

(Va-)(P(x) D P(/(a:))), P(m) 3 P{f{a, u)) h P{u) D P{f{s{a),u)) ^ 

{Vx){P(x) D P{f{x))),{Vx){P{x) D Pifja. x))) h P{u) D P(/(^(a), «))) ^ 

(Vx)iP{x) D Pifix))). {Vx){Pix) D P(/(a, a;))) h (yx){P{x) D P(/(s(q), x))) 

Finally, we define ip as (to gain some space, the cut- formula (Vn)(Vx)(P(x) D 
P{f{n,x))) is denoted with C): 

(^) (x) 

(Vx)(P(a;) D P(/(x))) h C C h (V«) (Vx) ((P(/(n, x)) D P(g(n, x))) D (P(r) D P(g(n, x)))) 

cut 

{Mx){P{x) D P{f(x}}} h (Vn)(Va:)((P(/(n,x)) D P(g(n, x))) D {P{x) D P{g{n,x})}) 

where x is an induction-free proof of the form: 

P(/(/3, u)) h PUiP, u)) P(g(/j, u)) h P(g(/3, n)) ^ ^ 

f (") I- PjkP, u)) D P[g[P, u)), PjfifS, u)) h P(g(P, u)) ^ ^ 

P{u),PU\p, u)) D P{g{p, u)), P{u) D P(/(;3, u)) h P(g(;8, «)) ^ 
P(/(ff,«)) D P(g(/j.«)),P(«) D PU{p,u))^ P{u) DP(g(/3,«)) '^^ ^ 

J'C") 3 ")) I- ")) 3 P(g(/?. "))) => [PM 3 P(g(/3. "))) 

(V^^)(Vx)(P(x) D P(/(n,x))) h (P(/(ff,M)) D P(g(ff,«))) D (P(m) D P(g(;3,M))) 
(Vn)(Va;)(P(x) D P(/(n, x))) h (Vn)(Vx)((P(/(n, x)) D P(g(n, x))) D {P(x) D P(g(n, x)))) 

In the attempt of performing reductive cut-elimination a la Gentzen, we 
locate the place in the proof, where (Vn) is introduced. In x, (Vn)(Va:)(P(a;) D 
P(/(n,x))) is obtained from (Vx)(P(x) D P{f{p,x))) by V: /. In the proof 
we may delete the V: r inference yielding the cut-formula and replace 7 by /3. 
But in the attempt to eliminate (Vx)(P(a;) D P{f{f3,x))) in ip we get stuck, as 
we cannot "cross" the ind rule. Neither can the ind rule be eliminated as (3 is 
variable. In fact, if we had instead {\/x){P{x) D P{f{t,x))) for a closed term 
t over {0, s, -|~, *} we could prove h t = n from the axioms of Pcano arithmetic 
and also 

(Vx)(P(x) D P(/(x))),(Vx)(P(x) D P(/(0,x))) [- (Vx)(P(x) D P(f{n,x))) 

without induction (by iterated cuts) and cut-elimination would proceed. 

This problem, however, is neither rooted in the specific form of tjj nor the 
ind rule. Even if we had used the binary induction rule, 

rhn,A(0) A, A{a) h A, A{s{a)) 

r,Ahn,A,A(t) '''^ 
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the result would be the same. In fact, there exists no proof of S with only 
atomic cuts ~ even if ind is used. In particular, induction on the formula 

(Vn)(Va;)((P(/(n,x)) D P{g{n,x))) D {P{x) D 

fails. In order to prove the end-sequent an inductive lemma is needed; something 
which implies (Vn)(Va;)(P(a;) D P{f{n,x))) and cannot be eliminated. 

While there arc no proof of S in LKg with the axioms of minimal arithmetic 
and only atomic cuts, the sequents Sn'. 

{yx){P(x) D P{f{xm h (Va:)((P(/(fi,an)) D P(s(fi,x))) D {P{x) D P(g(fi, an)))) 

do have such proofs in LKg for all n; indeed, they can be proved without 
induction. But instead of a unique proof ip oi S we get an infinite sequence of 
proofs (fin of Sn, which have cut- free versions ip[^ (henceforth "cut- free" means 
that atomic cuts are admitted). This kind of "infinitary" cut-elimination only 
makes sense if there exists a uniform representation of the sequence of proofs (/?^. 
We will illustrate below that the method CERES has the potential of producing 
such a uniform representation, thus paving the way for cut-elimination in the 
presence of induction. 
Let Sn be 

{Vx){P{x) D P(/(an))) h (Va;)((P(/(«, an)) D P{gin,x))) D {P{x) D P(g(ri, a^)))) 

where n is a number variable, henceforth called a parameter and £ be the 
equational theory defined above. 

First we define a proof schema ipn playing the role of ip in the inductive proof 
above; ipo is: 

P(/(0.xo)) h P(/(0,a:o)) ^ 

P(xo) h P(/(0,a:o)) ^ 

h P(a:o) D P(fi5,xo)) ^ 

h (Va;)(P(a:) D P(/(0,a:))) 

w : I 

{Vx){P{x) D P{f{x))) h {\fx){P(x) D P(/(0,x))) 

and -ipk+i is: 

W'aO 

iyx)iP{x)DPif{x)))hiyx)(P(x)DPif{k,x})} (1) 

cut,c: I 

(Va;)(P(a;) D P(/(a;))) h (Va;)(P(a;) D P(f{s{k),x))) 

where (1) is: 

P(/(s(fc), Xfc+i)) h P(/(s(fc), Xk+i)) 

P(/(fc, Xfc+i)) h P(/(fc, Xt: + l)) P(/(/(fc, + I- Pifisjk), Xk + l)) 

Pjfjk, x„^i)),P{f(k, a:fc + i)) D P(/(/(fc, x^ + i))) h Pjfisjk), x^+i)) 

P{xk+i) H Pjxk+i) P(/(fc, Xk+i)), iVx)(P{x) D Pifix))) h Pifisjk), Xfc+i)) ^ 

Pixk+i), Pixk+i) D P(/(fc, Xk+i)), iVx)iPix) 3 Pifix))) h P(/'(s(fc), Xfc+i)) ^ ^ 
Pjxk+l) D P(/(fc. Xk+i)), (Vx)(P(a:) D P(/(x))) h P(a;fc+i) 3 P(/(s(fc), a:fc + i)) 
(Va;)(P(a:) D P(/(fc, x))), (Va:)(P(x) D P(/(x))) h P(x;, + i) D P(/(s(fc), x^+i)) 
(Va:)(P(x) D P(/(fc, x))), (Vx)(P(a;) D P(/(x))) h (Vx)(P(a;) D P(/(s(fc), a:))) 
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Instead of Sn we consider the skolemized version S'„^ 
(Vx)(P(x) D P{f{x))) h (P(/(n,c)) D P{g{n,c))) D (P(c) D P(3(n,c))) 
and define ipn- 

{Vx){Pix) D P(/(2;))) h C C h (P(/(n, c)) D _P(g(n, c))) D (P(c) D P(s(«, c))) 

cut 

iyx}iP{x) D Pifix))) h (P(/(n,c)) D P(3(n,c))) D (P(c) 3 P(ff(n,c))) 

where C = {Vx){P{x) D P{f{n,x))) and (x„) is: 



P(/(n, c)) h P(/(n, c)) P(s(n, c)) h P(ff(n, c)) 



P(c) h P(c) P(/(r,, c)) D P(g(ri, c)), P(/(«, c)) h P(g(n, c)) 

; : 3 : i 

P(e), P(/(n, c)) D P(g(K, c)), P(c) D P(/(n, c)) h P(3(«, c)) ^ ^ 

P(/"(«,c)) D P(g(«,c)).P(c) D P(f (rue)) h P(c) D P(g(K, c)) ^ 

P(c) D P(/(«, c)) h (P(/(«, c)) D P(g(«, c))) D (P(c) D P(g(«, c))) ' ^ 

{yx)(P{x) D P(/(ri, x))) h (P(/(r,, c)) D P(g(«, c))) D (P(c) D P(g(n, c))) 

In the next step we determine the characteristic clause set schema of (^„, 
CL(^„), inductively: CL(</jo) = P(c); P(/(0,c)) h} and CL((^„+i) is 

{P(/(0,a;i))hP(/(s(0),xi)); ■•• ; P(/(n, x„+i)) h P(/(s(n), x„h.i)); 
hP(c); P(/(n + l,c))h}. 

Now, via the theory f , the clause P(/(0,xi)) h P{f{s{0),xi)) becomes P{xi) h 
P(/(xi)) and the clause set boils down - via subsumption to: 

CL(^„)' = {^(2^1) ^ ^(/(^i)); ^ ^(c); P(/(n,c)) h} 
A sequence of resolution refutations of CL((/3„)' is given by (5„: 



iVn) 

hP{f{n,c)) P{f{n,c))V- 



where rj^ is h P(c) and ry^+i is: 

^P{f{k,c)) Pjxk+i) ^ P{f jxk+i)) 
hP(/(/(fc,c))) 



Xfc+i ^ /(fc, c) 



P(/(fc + l,c)) 



^ Skolcmization is vital for CERES but the situation in the inductive proof above remains 
the same - we get c instead of /3 and again the same argument apphes that the cut cannot be 
eUminatcd. 
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The projections and the ANCFs of the proof sequences will be illustrated 
in Section [8] as an application of the formal machinery to be developed in the 
sections to come. We see that by using the CERES method we are capable of 
computing a uniform description of the infinite sequence of ACNFs. In fact, 
this computation of cut-elimination in a schema can be considered as a cut- 
elimination method in the presence of induction. 

5 Schematic language 

In order to give a systematic treatment of cut-elimination in the presence of in- 
duction along the lines of the previous section, we start by defining a schematic 
first- order language, i.e. a formal language that allows the specification of an 
(infinite) set of first-order formulas by a finite term. Towards this, we work in 
a two-sorted setting with the sort w, intended to represent the natural num- 
bers, and the sort t, intended to represent an arbitrary first-order domain. Our 
language consists of countable sets of variables of both sorts, and sorted n-ary 
function and predicate symbols, i.e. we associate with every n-ary function / a 
tuple of sorts (ri , . . . , r„ , r) with the intended interpretation / : ti x • • • x r„ — > t, 
and analogously for predicate symbols. We additionally assume that our func- 
tion symbols are partitioned into constant function symbols and defined function 
symbols. The first set will contain the usual uninterpreted function symbols and 
the second will allow primitive recursively defined functions in the language. 

Terms are built from variables and function symbols in the usual inductive 
fashion. We assume the constant function symbols : lj and s : w — >■ a; (zero 
and successor) to be present {ii t : ui we will often write t + 1 instead of s{t)). 
By V{t) we denote the set of variables of a term t. 

For every defined function symbol /, we assume that its type is a; x ti x 
• • ■ X r„ -> r (with n > 0), and we assume given two rewrite rules 

/(O, Xi, ...,Xn)^S, 
f{s(y), Xi,...,Xn) ^ t[f{y, Xl,..., Xn)] 

such that V(s) C {xi, . . . ,x„} and V(t[/(y,xi, . . . ,a;„)]) C {xi, . . . ,x„, j/}, and 
s, i[a;] are terms not containing /. and if a defined function symbol g occurs in s 
or t[x] then g ^ f. We assume that these rewrite rules are primitive recursive, 
i.e. that -< is irreflexive. 

To denote that an expression t rewrites to an expression s (in arbitrarily 
many steps), we write t ^ s. 

Example 5.1. The usual primitive recursive definition of addition can be rep- 
resented in our system: let -I- : a; x w — >■ a; be a defined function symbol with 
the rewrite rules -t-(0,a;) — s- x and +(s{y),x) s{+{y,x)). 

Since our terms can represent the primitive recursive functions, we have the 
following. 

Theorem 5.1. The unification problem of terms is undecidable. 
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Proof. Consider the s-terms defined over the arithmetic signature given by 0, S. 
Then, by the rewrite rules, we obtain a programming language for the primitive 
recursive functions. It can be shown that there are universal Turing machines 
with a halting predicate T {T{n, m, k) iff program nr. n halts on m within k 
steps) s.t. T is elementary. The elementary functions are just the functions 
computable by LOOP-2 programs, for which there exists a primitive recursive 
effective enumeration (see |8]). I.e. there exists a function ^/j: N x N — > N s.t. 

Tp(n,m) = result of LOOP-2 program nr. n on input m. 

and for all f E Ef {E]t are the elementary functions N" — ?> N''') there exists a 
primitive recursive h s.t. 

ip{h{n), m) = f{n, m) for all n,m eN. 

Now we define a function 5 : N x N ^> N by 

g{n,k) ~ fc + 1 if -iT(n, ri, fc) 
= otherwise. 

By definition of g we obtain 

n & K yk.^T{n, n, k) O Vfc.,9(n, fc) 7^ 

where K is the halting problem. As is a primitive recursive and effective 
enumeration of E\ there exists a primitive recursive function h s.t. ip{h{n), k) = 
g{n, k) for all n, fc G N, and so 

n e K ^\/k4{h{n),k) ^ 0. 

Now let G Fs the representation of ij}, ft G Fs that of h. Then deciding the 
unification problems ip{ifi,y) = for number constants rh we can also decide 
the problem 

U{fh{n),y) = for n G N 

and thus obtain a decision procedure for which obviously does not exists. 

□ □ 

Wc now turn to the definition of schematic formulas. Analogously to func- 
tion symbols, wc assume that the predicate symbols arc partitioned into constant 
predicate symbols and defined predicate symbols^ assuming as above rewrite rules 
and an irreflexivc order -< for the latter. Formulas are then built up inductively 
from atoms using A, V, 3, V, 3 as usual. To give concise examples, we some- 
times use the formulas T, 1. although they are not official parts of the language. 
In our setting, it is important to clarify how to interpret multiple occurrences of 
the same bound variable. For an occurrence of a bound variable cc, we consider 
the lowermost (in the bottom-growing formula-tree) quantifier that binds x to 
be associated to that occurrence. Consider the following clarifying example. 
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Example 5.2. Let P : w be a defined predicate symbol, R : cu x l a. constant 
predicate symbol, and a; : i a variable. For the rewrite rules for P, take 



P(0) ^ T, 
P(s(n)) -> 3x {R{n, x) A P{n)), 



Then we have P(2) -» 3x {R{2, x) A 3x (P(l, x) AT)) which is equivalent to (by 
renaming of bound variables) 3x2 (P(2, X2) A 3xi (P(l, xi) A T)). 

Proposition 5.1. Let A be a formula. Then every rewrite sequence starting at 
A terminates, and A has a unique normal form. 

Proof. Trivial, since all definitions are primitive recursive. □ □ 

Finally, we note that formulas V*=s ^(*) (which rewrite to _L if s > t and to 
Mt) V yiZ; A{i) otherwise) can be expressed using defined predicate symbols 
PA.s,t (see [Sill]), so wc will also use them freely in examples. 



6 Schematic Proofs 

We will now give a natural notion of proof schema for the language defined in the 

previous section, and compare these proof schemata with the calculus LKIg. 

To this end, we need some notions: If wc introduce a sequent as S{xi, . . . ,Xa), 

then by S{ti, . . . ,ta) we denote 5'(a;i, . . . , x^) where xi,...,a;Q are replaced 

by ti, . . . ,ta respectively, where tp are terms of appropriate type. We assume 

a countably infinite set of proof symbols denoted by .. If 1^9 is a proof 

1 1 1 \ 11 • \^\a\. . . . . a^)) 

symbol and byxi, . . . ,Xa) a sequent, then the expression is 

S{ai, . . . ,aa) 

called a proof link. For a variable k : w, proof links such that V(ai) C {fc} are 
called k -proof links. 

Definition 6.1. The sequent calculus LKSg consists of the rules of LKg, where 
proof links may appear at the leaves of a proof, and where £ is the set of rewrite 
rules (interpreted as equations) for the defined function and predicate symbols. 



Definition 6.2 (Proof schemata). Let iphe a proof symbol and S{n, xi, . . . , Xa) 
be a sequent such that n : uj. Then a proof schema pair for t/i is a pair of LKSg- 
proofs (tt, v{k)) with end-sequents 5(0, xi, . . . , Xa) and S{k + 1, xi, . . . , Xa) re- 
spectively such that TT may not contain proof links and v^k) may contain only 

proof links of the form 1:^^-^-12 - 'J {ai, . . . ,aa terms of appropriate 

S{k,ai, . . . ,aa) 

type). For such a proof schema pair, we say that a proof link of the form 

_('0(^j_ i_j — jg proof link to tp. We say that S{n,xi, . . . ,Xa) is the 
S{a,ai, . . . , Cq) 

end-sequent of tp., and we assume an identification between formula occurrences 
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in the end-sequents of tt and ^{k) so that we can speak of occurrences in the 
end-sequent of ip. 

Finally, a proof schema ^E* is a tuple of proof schema pairs (pi, . . . ,pa) for 
f/'i , . . . , V'q respectively such that the LKSg-proofs in pp may also contain k- 
proof links to V'7 for 1 < /3 < 7 < a. We also say that the end-sequent of ipi is 
the end-sequent of ^. 

Example 6.1. We now present the proof sequence given in Section 2] according 
to our formal definitions. For the defined function symbol /, we assume as 
rewrite rules (oriented versions of) the equalities given in Section 21 Then we 
define a proof schema \1/ = ((tti, z^i(fc)), (712, i^2(fc))} for </?,'(/'■ where vi{k) is 
defined as: 

+ 

(yx)iP{x) D P(f(x))) h {Wx)iP(x) D P(f(k + 1, x))) (2) 

cut 

{Vx)iP{x) D Pifix))) h (P(/(fe + 1, c)) D P{g{k + 1, c))) D (P(c) D P(g{k + 1, c))) 

where (2) is: 

P(/(fc + 1. c)) h P(/(fc + 1, c)) P(g(k + 1. c)) h P(g(k + 1. c)) ^ ^ 

P(c)hP(c) P(/(fc+l,c)) DP(3(fc + l,c)),P(/(fc+l,c))l-P(g(fc + l,c)) 

: : 3: i 

P(c),P{f{k + 1, c)) D P(s(/c + 1, c)), P(c) D P(/(fc + 1, c)) h P(g(k + 1, c)) 

D : r 

P(/(fc + 1, c)) D P(g(fc + 1, c)),P(c) D P{f(k + 1, c)) h P(c) D P(g(fc + 1, c)) ^ ^ 

P(c) D P(/(fc + 1, c)) V- (Pjfjk + 1. c)) D P(g(k + 1, c))) D (P(c) 3 P(g(fc + 1. c))) ^ ^ 

(V2;)(P(x) D P(/(fe + 1, x))) h (P(/(fc + 1, c)) D P(g(fc + 1, c))) D (P(c) D P(g(k + 1, c))) 

Note that the proof link in vi{k) is a fc-proof link to ip. For tti, we take vi{k) 
where fc -I- 1 is replaced by 0. Hence the end-sequent of ip is (Va;)(P(a;) D 
P{f{x))) h (P(/(n, c)) D P(ff(n, c))) D (P(c) D c))). 

We continue giving the definitions for the proof symbol tt2 is 

P(/(0,xo))HP(/(0,a;o)) ^ 

P(a:o) h P(/(0,ao)) ^ 

h P(3:o) D P(/(0,3:o)) 

h (V2;)(P(x) D P(/(0,x))) 

w : I 

{\/x){P{x) D P{f{x))) h (Vx)(P(x) D P(/(0,x))) 

and :^2(fc) is 

Wk}) 

(yx)(P{x)D Pifix))) hiyx)iP{x)DPif{k,x))) (1) 

cut,c: I 

i^xJiPix) D Pifix}}} h iyx}iPix) D P(/(fc + 1, x})} 

where (1) is: 
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P(/(fe + 1, Xfc + i)) h P{f(k + 1, Xk+l)) 

: : £ 

P{f{k, x^+i)) h P(f{k, Xk+i)) P(f[f{k, Xk + i))) H P(/(fe + 1, Xk + i)) 



P{f{k,Xk + i)),Pif{k,Xf, + i)) D -P(/(/(fc,Xfc+i))) h P(/(fc + l,a:fc + i)) 

P(a^fc + i) h P(xfc+i) P(/(fc, a^fc+i)), (Va:)(P(a:) 3 P{f{x))) h P{f(k + 1, x^ + i)) ^ ^ 

P{xk+i), P{xk+i) D P(/"(fc, a^fc+i)), (Va;)(P(a;) D Pjfjx))) h P(/'(fc + 1, x^+i)) ^ ^ ^ 
P(a;fc+i) D P(/(fc,a;fc+i)),(Va:)(P(x) D P(/(3:))) H P{xk + i) D P{f{k + l,Xk+i)) ' ^ 
(Vx)iP{x) D P(/'(fc, a;))), (Va;)(P(3:) 3 P(/(a:))) I- P(a:fc + i) D P(/(fc + 1, a^fc+i)) 
(Vx)(P(a:) D P(/(/c, a:))), (Vi;)(P(x) D P(/(an))) h (V2;)(P(a:) D P(/(fc + 1, x))) 

Hence the end-sequent of ?Ms {Wx){P{x) D P{f{x))) h (Vx)(P(x) D P{f{n,x))). 
For the rest of this paper, we consider a fixed proof schema 
((7ri,i/i(fc), . . . , (7rQ,z^Q(fc))) for ■(/'i, • • • , V'q- 

Proof schemata naturahy represent infinite sequences of (first-order) proofs. We 
will state this fact formally as a soundness result. First, we define the notion of 
evaluation of proof schemata. 

Definition 6.3 (Evaluation of proof schemata). We define the rewrite rules for 
proof links 

('0(O,xi, . . . ,a;^)) {ip{s{k),xi,...,Xf})) 

— >7r, — >■ vyK) 

S{Q,xi,...,xi3) S{s{k),xi,...,xp) 

for all proof schema pairs (tt, zy(fc)) for -0. Now for 7 G N we define ?/;4-7 £is a 
iihi'yj X\ b) 

normal form of --' — L__ under the rewrite system just given extended 

S'(7,a;i, . . . ,a;;3) 

with rewrite rules for defined function and predicate symbols. Further, we define 

^ i-,^ -01^7. 

Proposition 6.1 (Soundness of proof schemata). Let "i! he a proof schema with 
end-sequent S{n, xi, . . . , xp), and let 7 6 N. Then there exists a first-order proof 

0/5(7,2:1, . . .,Xi3)i. 

Proof. First we prove the proposition for a proof schema consisting with one 
pair only and then extend the result to arbitrary proof schemata. Assume 
\E' = ((tt, r^(fc))). We proceed by induction on 7. If 7 = 0, 4* io= tt^o- The 
later one differs from tt only in defined function and predicate symbols, therefore 
7rJ,o is a proof of 5'(0,xi, . . . ,a;^) J,. Now assume for all (5 < 7, ^'4,5 is a proof 
of S{S,xi, . . . ,Xj3) X and consider the case for 7 + 1. If {ipik,Xi, . . . ,x^)) is a 
proof link in i^(fc), then by hypothesis it rewrites to J,^. Then after applying 
rewrite rules of defined function and predicate symbols to 2^(7), we get a proof 
of S'(7 -I- l,xi, . . . ,a;/3)4-. 

The result is easily extended to arbitrary proof schema 5*, considering the 
fact that for all 7 g N each pair (tt^, viik)) e ^' is evaluated to a proof of the 
sequent S'i(7, xi, . . . , cce)^,. □ □ 



V: I 
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If fc : a; then an LKIg-proof tt is called k-simple if all induction rules in tt 
are of the following form: 

A(k),Th A,A(k + l) 

IND 



A(0),rhA,yl(t) 

such that V{t) C {fc} (i.e. k is the "eigenvariable" of the induction inference, 
and k is the only variable occuring in t). Our next aim is to show that proof 
schemata and LKIg, restricted to /c-simple proofs, are equivalent: 

Proposition 6.2. Let '5 6e a proof schema with end-sequent S . Then there 
exists a k-simple LiKls -proof of S . 

Proof. Let (tt-,,, z/^(fc)) be proofs of S~f{k) for respectively. We construct 
inductively fc-simple LKIg-proofs of S^{k), starting with {Tra,Va{k)). By re- 
placing proof links in Va{k) by axioms Sa{k) h Sa{k) and using 
Saik) 

cuts on some easily constructed LKg-proofs we obtain an LKg-proof A of 
Sa{k) h Sa{k + I). Then the following is the desired fc-simple LKIg-proof 
of Sain): 



(A) 

(7r„) 5„(fc) h5a(fc-t-l) 



IND 



h 5^(0) SgjO) h Sgjk) 

hSaik) 

For the induction step, assume that we have LKIg-proofs A^+i , . . . , Aq of Sj+i{k) , 
. . . ,Sa{k) respectively. Our aim is to construct an LKI^-proof of S^{k). As 

before, in v^ik) we replace proofs links of the form !^-!:^^\- by axioms to obtain 

Si{t) 

an LKf-proof of 

5„ (i? ),..., ... , 5^+1 (^r^), . . . , s^+.itj+i), s,{k) h 5^(fc + 1). 

Substituting for k in A^+i, . . . , Aq,, we obtain appropriate proofs to obtain, via 
cut, an LKIg-proof of S^{k) h S^{k-\-l). Note that the Ai remain fc-simple since 
the proof links in u^{k) are fc-proof links. We perform an analogous transforma- 
tion on TT^ to obtain an LKIg-proof of h 5*^(0). From these proofs wc construct 
the desired LKIg-proof using the IND rule as in the base case. Clearly this 
application of the IND rule is again fc-simple. □ □ 

We illustrate this by means of a simple example. 

Example 6.2. Consider the proof schema 4* = ((tt, v{k))) for the proof symbol 

Ip with TT — 

P(0)l-P(0) P(l)hP(l) ^ 



^^(0),Ato(^W3^(» + i))^'P(i) 
and ^(fc) = 
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Wk)) 

P(0), Afco(-P(«) 3 + 1)) I- + 1) -PC^' + 2) I- P{k + 2) 

;^ ^- ' 

■P(O), ALo(-P(0 3 P(i + 1)), P(fc + 1) D P(fc + 2) h P(fe + 2)] 

Z A : I 

-P(O), ALo(-P(») 3 Pi^ + 1)) A -PC^ + 1) 3 P(fe + 2) h P(fe + 2) 

£ 



P(0), A -^0 (^^l*) 3 P(» + 1)) H P(fe + 2) 

latcd to th 

P{k + 1): 



It is translated to the LKIg-proof of S{k) = P{0) A ALo(-P(«) ^ + 1)) =^ 



canonical proof 



S(fc), P(0), Ai=o(P('') 3 Pii + 1)) ^ + 1) P(k + 2) h P(fc + 2) 

1^ ^- ' 

P(0), ALn(P(») 3 P(i + 1)), P(fc + 1)3 P(fc + 2) h P(fc + 2) 

, , D:r./\:l.£ 

M S{k) h S{k + 1) 

h S(0) S(0) h S(fc) 



h S(fe) 

Towards proving the converse of Proposition 16. 2[ we introduce the calculus 
LKIg', which is just LKIg where the IND rule is replaced by a binary version 

rhA,A(o) A^(fc),r^ h A^,A^(fc + i) 

IND' 



where again k does not occur in T, A, A{0). We define fc-simple LKIg'-proofs 
analogously to /c-simple LKIg-proofs. The following result is easy to prove. 

Proposition 6.3. There exists a (k-simple) LiKlg -proof of S if and only if 
there exists a (k-simple) JjKlg' -proof of S . 

Proposition 6.4. Let tt be a k-simple LKI^ -proo/ of S. Then there exists a 
proof schema with end-sequent S. 

Proof. By Proposition 16.31 we may assume that tt is a /c-simple LKI^ '-proof. 
Let TT contain a induction inferences 

T/^h Ap,Ap{0) Aii{k),rii\- Ap,Ap{k + l) 

TphAp.Apit) 

where 1 < (3 < a. W.l.o.g. we assume that if 7 < /3 then the induction 
inference with conclusion h Ap,Ap{t) is above the induction inference with 
conclusion F-^ h Ay,A-y{t) in tt. Further, let T be the transformation taking 
an LKIf-proof A to an LKSg-proof by replacing the induction inferences with 
conclusion F^ h A^, A^(t) by proofs 

TphAp,Ap{t) 

Clearly, if A is a fc-simple proof, then r(A) will only contain fc-proof links. 

We will inductively construct a proof schema 4* = ((tti, iyi{k)), . . . , (tTq,, Va{k))) 
where (7r^,;/^(fc)) are proof schema pairs with end-sequent F^ h Afj,Aii{n) for 
proof symbols ipp respectively. Assume that we have already constructed such 
proofs for t/j^+i, . . . , -(/jq, and consider the induction inference with conclusion 
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h Ai3,Aj3{t). Let its left premise be Ai and its right premise A2. We set 
TTp = T(Ai), which by definition of T fulfills the requirements on proof links. 
Further, let Vj3{k) be the proof 

iMk)) (r(A2)) 

cut 

Tp\-Ap,Ap{k + l) 

which also clearly satisfies the requirement on proof links. Summarizing, [TTp^ vp{k)) 
is a proof schema pair with end-sequent T p h A^, Apin), as desired. □ □ 



6.1 Discussion of Regularization of Schematic Proofs 

For an ordinary first-order CERES, the characteristic clause set is computed 
from a regular proof, otherwise it may be satisfiable. Regularization is vital for 
CERES only in some cases when two different eigenvariablcs come from different 
branches of a binary rule, that produces an ancestor of some formula in the end- 
sequent. Therefore we need also the notion of regularization in proof schemata. 
For LKSf-proofs we use the usual notion of regularization, i.e. an LKSg-proof 
is regular iff all eigenvariablcs are distinct. But this is not enough and the reason 
is illustrated by the following example: Let ^t* = ((tt, v{k))) where tt is 

P(0, u) h P(0, u) 
(Va:)P(0,K) h P(0, m) ^' ' 
(Vx)P(O, x) h {yx)P(0,x) ^' 

and ^{k) is 



P(k + 1, m) h P(k + 1, u) 
ii'.k) (Vx)P(fc + h P(fc + ^' ' 

\/'l^„{yx)P{i,x) h \/'l^g{Vx)P{i,x) (V2;)P(fc + 1. x) h {Vx)P{k + 1, x) ^' 

VS(Va:)P(i,x) h \J^^o(yx)P{i,x}, {\/x)P{k+l,x) ^' 
V?=o (Vx)P(i,x) h \/i+o{Vx)P(i,x) 

Then clearly, u is an eigenvariable, tt and i'(fc) are regular, but when an 
instance of the schema 5* is computed for some a 7^ 0, the instance is not 
regular anymore. 

To avoid such collisions of eigenvariablcs, a stronger notion of variable is 
needed. Wc introduce variable function symbols of type — > t. Then the second 
order (or schematic) variables are built from variable function symbols and 
terms of type w. The set of such variables is denoted with V2. The semantics is 
that if X S V2 then for all a £ N, a; (0), ... , x{a) corresponds to the sequence of 
first-order variables xq, . . . ,Xa- 

We redefine our notions of term, formula and the like, in the usual inductive 
fashion, taking into account schematic variables. For example, if x e V2 and 
/ is a defined function symbol with the rewrite rules: f{0,x) — > x(0) and 
/(fc + l,a;) g{f{k,x),x{k + 1)), then f{n,x) is a term, and the sequence of 
terms for n = 0, 1, 2, . . . is x{0), g{x{0),x{l)), g{g{x{0), x{l)),x{2)), . . .. 
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Another issue is to distinguish between global and local eigenvariables. An 
eigenvariable is global if it is propagated through proof hnks, otherwise it is 
local. This distinction is motivated by the fact that a global eigenvariable must 
occur in (at least) two different proof schema pairs, where in one it is just a free 
variable and in the other it is an eigenvariable. Finally, we define the procedure 
of regularization: 

Definition 6.4 (Regularization). Let 'J be a proof schema. For each pair 
{■Ki,Vi{k)) in we do the following: replace every eigenvariable Xj with Xj{0) 
in TTi, every local eigenvariable Xj in Ui(k) with Xj[k + 1) and every global 
eigenvariable yj in Vi{k) with yj(0). 

According to this definition, the regularized version 4*' of the proof schema 
given above, is: tt' is 

P(0,«(0)) h P(0,ti(0)) 
(Va;)P(0,a;) h P(0, u(0)) ^' ' 
(Vx)P(0,a:) H (yx)P{0.,x) ' ^ 

and v{k) is 



P(fc + 1, tl(fe + 1)) h P(k + 1, tl(fc + 1)) 

(V;. fc) (V2;)P(fc + 1, x) h P(fe + 1, + 1)) 

\/'l^glyx)P(i,x)\-\/'i^„(\tx)P(i,x) (\/x)P(k +l,x)\- (yx)P(k + 1, x) 

\/'i+^(\/x)P(i,x) h VLo(V^)-P(^2:),(Va;)P(fe+ 

In the future we consider only regular proof schemata. 



7 Resolution Schemata 

In this section we define a notion of schematic resolution. In fact, schematic res- 
olution refutations of CL(tf'), combined with the schematic projections PR{'F) 
allow the construction of schematic atomic cut normal forms of the original 
proof schema 'F - what is precisely the aim of a schematic CERES-method. 

Definition 7.1 (clause). Let pi,...,pa and (71,..., be schematic atomic 
formulas; then pi, . . . ,pa \^ qi, . . . ,qp is called a clause. A clause in fc, for an 
arithmetic variable k, is a clause containing at most k as arithmetic variable. 
A clause is called arithmetically ground (shorthand: a-ground) if it does not 
contain arithmetic variables. An arithmetically ground clause is in normal form 
if it is irreducible under the defining rewrite rules. The set of all clauses is 
denoted by CLAUSES. 

We introduce clause symbols and denote them by c, c', ci, C2, . . . for defining 
clause schemata. Clause variables are denoted by A", F, Xi , Yi , . . . and the set 
of all clause variables is denoted by Vc- 
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Definition 7.2 (clause schema). • Clauses and clause variables are clause 
schemata. 

• If Ci and C2 are clause schemata then Ci o C2 is a clause schema. 

• Furthermore, let c be a clause symbol of arity /? + 7 + 1, a an arithmetic 
term, xi, . . . ,Xi3 and Xi, . . . , S Vc- Then c(a, xi, . . . , Xj3,Xi, . . . , X^) 
is a clause schema w.r.t. the rewrite system TZ{c), where TZ^c) is of the 
form 

{c(0,xi, ...,Xi3,Xi,.. .,X-f) C, 

c(S'fc,a;i, . . .,x^,Xi, . . .,X^) -> c{k,xi, . . .,xi3,Xi, . . .,X^) o D} 

where C is an arithmetically ground clause schema s.t. V{C) C {xi, . . . , xp, 
Xi, . . . , Xj} and Z) is a clause with F(D) C {xi, . . . , a;^, A}. The set of 
clause schemata is denoted by CS. 

Example 7.1. Let <t e F^,g S {x G V2, ^ G Va) with the corresponding 
rewrite rules Ti{a) 

{a{0,x,l) —T' x{l), 

a{Sk,x,l) ~> g{a{k,x,l))} 

and let c(n, a;, X) be a clause schema for 72.(c) consisting of the rules 

{c(0,x,X) ^ Xo(hPKO,.T,0))), 
c(S'A:,a;,X) ^ c(/c, a;, X) o (h P(CT(5'fc, x, S'fc)))} 

For X G V"c. The normal forms of c{n,x,X) for {n a} arc just the clause 
schemata 

XhP(x(0)),P(.g(x(l))),...,P(5"(a;(a))). 

Definition 7.3 (semantics of clause schemata). Let C be a clause schema. Let 
d be an arithmetically ground s-substitution with 14(C) U Vi(C) C dom{'d) and 
A be a c-substitution without clause variables in the range and Vc{C) C dom{X). 
We define the interpretation of C under (1?, A) as 

Example 7.2. let c(n, x, X) be the clause schema from Example 1 7.11 ?9 = {?i f- 

a} and X ^ {X ^ Q{xin))}. Then 

^;c(^. A, C) - Q(x(a)) h P(x(0)), P{9{x{m, . . . , P(3"(a;(«))). 

Clause schemata define infinite sequences of clauses. For the purpose of 
schematic CERES it is also vital to describe the infinite sequence of clause sets 
Ch{(p„). To this aim we define a formalism for describing sequences of clause 
sets. Like in the ordinary CERES-method we define a type of clause term, but 
we admit variables over finite sets of clauses (clause-set variables), which we 
denote by ^,^o,£,i, The set of all clause-set variables is denoted by Vdsct- 
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Definition 7.4 (clause-set term). We define the set of clause-set terms CST as 
follows: 

• if e e Kkct then C e CST, 

• if C e CS" then [C] G CST, 

• if <i , t2 e CST then ti © e CST and (g) G CST. 

Definition 7.5. Let t be a clause-set term s.t. Va{t) U Vc(t) U Vc\sct{t) = 0- 
Then we define the evaluation of i to a set of clauses in the standard way: 

• lit^ [C] then = {C}. 

• Ut = ti®t2 then \t\ = \ti\ U jtal- 

• U t = ti ® t2 then \t\ = \ti\ X \t2\. 

Definition 7.6 (semantics of clause-set terms). Let t be a clause-set term 
with Vc{t) = {Xi, . . . Kisct(0 = {^1, • • • and Vait) = {n}. Let ^ = 

{n ^ 7}, A = {Xi ^ Ci,...,Xa ^ Ca} (for clauses Ci,...,Cq,) and ^ = 
{^1 <— si, . . . , <— S/j} (for clause-set terms si, . . . , not containing clause- 
set variables. Then we define a semantic function Vcst by 

Ucst(i^, A,^,t) = |(t/iA??) I |. 

where | | is from Definition 17.51 

Example 7.3. Let c be the clause symbol from Example 1 7. II Then 

t: ([c(n,.T,X)]® [hP(a;(n))])©e 

is a clause-set term. Let = {n a}, A = {X ^ h} and M = ^ 
[P{a{n,x,n)) h]}. Then the evaluation Wcst('!^, A, t) is 

{P(g"(x(a))) h} U {h P(a;(0)), P(5(a:(l))), . . . , P(g"(a;(a))), P(x(a))}. 

The definition below is needed to define clause set schemata via clause-set 
terms. 

Definition 7.7. Let t be a clause-set term, ^1, . . . , ^q. in Vcisct, and si, . . . , 
objects of appropriate type. Then t{^i <— si, ^q, 4- Sq,} is called a clause-set 
term over {si, . . . , Sa} (note that every ordinary clause set term is also a clause 
set term over any set {si, . . . , Sq}). 

Example 7.4. Let t be the clause-set term 

t: ([c(n,x,X)]® [hP(x(n))])©e 
from Example 17.31 and s be some object of the type of CST. Then 

t': {[c{n,x,X)](E)[h P{x{n))])®s 
is a clause-set term over {s}. 
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Definition 7.8 (clause-set schema). We reserve do, di, . . . for denoting clause- 
set schemata. A clause-set schema is a tuple A: (di, . . . ,da) together with sets 
of rewrite rules TZ{di), . . . , TZ{da) s.t. for alH = 1, . . . , a 

n{di) = {di(0, a;i,...,a;5,Xi,...,X/5,^i,...,^^) ~^t\, 
di{Sk,xi, . . . ,xs,Xi, . . . ,Xi3,^i, . . . ,^^) tf} 

where t^, tf are clause-set terms over terms in di, . . . , do,, is a clause-set term 
and 

V{tt) C {xi,...,xs,Xi,...,Xp,^i,...,^^,k}. 

Furthermore, we assume that di{a, xi, . . . , xs,Xi, . . . , X^, ^i, . . . , ^-y) is strongly 
normalizing for all a e N. 

Note that the previous definition is more liberal than the definitions of proof 
schemata and the schematic language: there, the rewrite rules representing 
the definitions of the symbols are required to be primitive recursive, and are 
therefore strongly normalizing. Here, we allow any ,, well- formed" , i.e. strongly 
normalizing, definition. We will make use of this more liberal definition in 
Definition 18. 1[ where we will define a class of clause-set schemata in a mutually 
recursive way. 

Definition 7.9 (semantics of clause-set schemata). We extend Wcst to a function 
v*^^. Let A : (di, . . . , da) a clause set schema as in Dcfinition l7.61 a substitution 
on 14(A), A a substitution on T4(A) and ^ be a substitution on V^isot(A). We 
define 

Xi,...,X0,Ci,...,e^)) = i'c.t(i^,A,e,i^), 
Kst{'^i^,iida{Sk,xi, ...,xs,Xi,.. .,Xi3,^i, . . . ,^^)) = v*^^_{-d,X,^,t%). 

Note that is a clause-set term. For 1 < i < a we define 

i'cst('?. A>C,'^i(5,a;i, ...,xs,Xi,.. .,Xf),^i, . . . ,^^)) = v*^^{-d,X,£,,t'^), 
Ksti'^^>',^:MSk,xi, ...,xs,Xi,.. . ,X/3,^i, . . . ,C^)) = v*^^{-d,X,£,,tf). 

The clause set schema defined by A w.r.t. (i?, A,/^) for dom{-d) = {n} is then 
defined as 

Vcsti'ff, X,(„di{n,xi,...,X5,Xi,...,Xi3,(,i,..., ^^)). 

A clause-set schema is called unsatisfiable if there exist A and f s.t. for all a 
and "da - {n ■(r- a} the clause set 

Vcsti'&a,\£„dlin,Xi, ...,Xs,Xi,.. .,Xi3,^i, . . . ,^^)) 

is unsatisfiable. 
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Example 7.5. Let a be defined by 

{(t{Q,x,1) -> x{l), 
a{Sk,x,l) g{a{k,x,l))} 

where 0(71, x,X) is the clause schema from Example 17.11 and a' G F} with the 
rewrite rules 

{a'(0) ^ a, 
a'iSk) -> gia'ik))} 

Note that cr'{n) la evaluates to g"{a). Furthermore we define the clause set 
schema A — (^1,^2) by 

TZ{di) = {di(0,x,X) ^ (d2(0,x,X)©C), 

di{Sk,x,X) d2{Sk,x,X) © [c(5fc,x,X)]}, 
TZid2) = {d2iO,x,X)^[Pia)h-], d2{Sk,x,X)^ {d2{k,x,X)(B[Pia'iSk))h]} 

Let ■& ~ {n ^ a}, X = {X ^h} and M = {C ^ [c(0, x, X)]}; then 

v:,M A, a;, X)) = {h P(x(0)), . . . , P(a) h; . . . , P(g"(a)) h} 

Definition 7.10 (resolution term). • clause schemata are resolution terms. 

• Let si and S2 be resolution terms w.r.t. TZi and TZ2, and P be an indexed 
atom. Then r(si; .S2; P) is a resolution term w.r.t. TZi U 7?.2 

Resolution terms define resolution deductions only if appropriate substitu- 
tions are applied to the clauses unifying atoms in clauses. 

Definition 7.11 (VJj-substitution schema). Let xi, . . . ,Xa G V2 and ti, . . . ,ta 
be s-terms s.t. Va(ti) C {n, fc} for i = 1, . . . , a then 

6 : {xi Afc.il, . . . , .Tq, <— Xk.ta} 

is called a V2-substitution schema (note that the terms ti may contain arbitrary 
variables in V2). 

Every V2-substitution schema evaluates to sequences of "ordinary" second 
order substitutions under an assignment for the parameter n. Indeed, let 1} = 
{n <— 13}; then 

Op^e-d = {Xi ^ Afc.(ii) li3,...,Xa Xk.{ta) ip} 

Note that the (ti) 4./} contain only fc as arithmetic variable. 

Example 7.6. Let c{n) be the clause schema defined in Example 17.11 Then 
the term t defined as 

r(r(c(n, x, X);P{x{n + 1)) h; P{x{n + 1))); P{x{n + 2)) h: P{x{n + 2)))}) 
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is a resolution term. We define a V2-substitution schema 9, s.t. the normal form 
of t{X Q{a) \-}9{n <— a} is a resolution deduction for aU a. 
Let g €z F2 s.t. g specifies the primitive recursive function 7: 

7(fc, n) = for fc < 71 + 1, 
= 1 for k = n + 1, 
^ 2 for fc > n + 1. 

Such a g exists as all primitive recursive functions can be expressed as schematic 
terms, g will need also other symbols in i^" for its definition. Let h, h' £ F| be 
defined as follows: 

h{0, X, fc, n) — > x{k), h{l + 1, x, k, n) — >■ h'{l, fc, n), 
h'{0, X, k, n) x{Q), h'{l + 1, x, k, n) -> ail, x, 1). 

We define 6* = {x Xk.h{g{k, n), x, k, n)}. 

Then, for all da - {n ^ a}, t'^ : {t{X Q{a) h}6'i?Q) I is indeed a resolution 
deduction. For a = 2 we obtain the resolution term 

r(r(Q(a) hP(x(0)),F(5(x(l))),P(.g(g(.T(2)))); P(x(0)) h; P(x(0))); 
P(g(x(l))) h; P{g{xm) 

which represents a resolution deduction of the clause Q{a) h P{g{g{x{2)))). 

Definition 7.12 (resolvent). Let C: Ci h C2, £>: £>! h Z?2 be clauses with 
Vai{C,D}) = and Vc({C,i:)}) = 0; let P be an atom. Then 

res{C,D,P)^C,,D,\PhC2\P,D2, 

where C\P denotes the multi-set of atoms in C after removal of all occurrences 
of P. The clause res{C, D, P) is called a resolvent of Ci and C2 on P. In case 
P does not occur in C2O and iDi^ then res{C, D, P) is called a pseudo-resolvent 
(note that inferring res{C, D, P) from C and D is sound in any case). 

Definition 7.13 (resolution deduction). If C is a clause then C is a resolution 
deduction and ES{C) = C. If 71 and 72 are resolution deductions and ES{'-fi) = 
Di, i?5'(72) = D2 and res{Di, D2, P) = D, where res{Di, D2, P) is a resolvent, 
then r(7i,72,P) is a resolution deduction and £'S'(r(7i, 72, P)) = D. 

Let t be a resolution deduction and C be the set of all clauses occurring in 
t] then t is called a resolution refutation of C if ES{t)= h. 

Note that resolution terms, containing only ordinary clauses and atoms, 
represent resolution deductions if, under evaluation of r by res, we obtain a 
consistent structure of resolvents. 

Definition 7.14 (tree transformation). Any resolution deduction in Defini- 
tion 17.131 can easily be transformed into a resolution tree by the following trans- 
formation T: 

• If 7 = C for a clause C then r(7) = C. 
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• If 7 = r(7i,72,P), ipi = T(7i), (^2 = ^(72), ES{lpi) = Ci, ES{ip2) = C2, 
and res(Ci, C2, P, 61) = C then r(7) = 

(Vl (<<52) 
C 

The length of T(7) is polynomial in the length of 7 as can be proved easily. 

Example 7.7. T(r(r(h Qo(2:), ^0(2^), A Pi(x) 'r; Pi[x))-Qo[x),Qi[x) h 
; (3o(2;))) is the resolution tree 

hQo(x),Po(x),Pi(a;) Pi(x-) h 

^Qo{x),Pa{x) Qa{x),Qi{x) h 

hPo(a;),Qi(x) 

we define a notion of resolution proof schema in the spirit of LK-proof 
schemata. 

Definition 7.15. Let t be a resolution term, Xi, . . . , Xa in T4, and si, . . . , Sq 

objects of appropriate type. Then t{Xi si, . . . , Xa Sa} is called a resolu- 
tion term over {si, . . . , Sq,}. 

Definition 7.16 (resolution proof schema). A resolution proof schema over the 
variables xi, . . . ,Xa G V2 and Xi, . . . , X/j £ Vdsct is a structure ((pi, . . . , p^), 7^) 
with 7?.: 7^1 U ... U 7?.^, where the TZi (for < i < 7) are defined as follows: 

T^i = {pi{0,xi,...,Xa,Xi,...,Xfi) -^t\, pi{Sk,xi,...,Xa,Xi,...,Xfi) ^t^}, 

where 

• is a resolution term over terms of the form pj{aj, si, . . . , Sa,Ci, . . . , Cp) 
for 1 < i < j. 

• t| is a resolution term over terms of the form Pj{aj, si, . . . , Sq,, Ci, . . . , C^) 
and pi(fc, s[, ...,s'a,C[,..., C^) for 1 < i < j. 

Definition 7.17 (semantics of resolution proof schemata). A resolution proof 
schema R is called a resolution deduction schema from a clause-set schema A if 
there exist substitutions A for Vc and p for Vdset and a V2-substitution schema 
s.t. for every i?/3 of the form {n -s— /?} (pi(n, x, Xi, . . . , Xa)A0i9/3) 4, is a 
resolution deduction tp from v*g^{'dp, A, /x, (ii(n, x, Yi, . . . , Ky, ^1, . . . , ^5)). If for 
all /3 ES{tp) = h then we call P a resolution refutation of A. 

Example 7.8. Let A be the clause-set schema defined in Example 17.51 defining 
the sequence of clauses 

C = {h P(xo), . . . ,P(g"(x„)); P(a) h; . . . , P(5"(a)) h} 
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Let (jO, TZ) be a proof schema with clause variable X defined by the following 
rewrite system TZ: 



{ 

p{0, X, X) ^ r(h P(a(0, 0)) o X; P(a'(0)) h; P(a(0, x, 0))), 

pCS-fc, X, X) r{p{k, X, h P{a{Sk, x, Sk)) o X); P{(j'{Sk)) h; a;, Sk))). 

} 

Then {p,TV) is a refutation schema for A; indeed, for A = {X <— h} and p = 
<— [c(0, X)]} and 6 defined as 

6* = {x -s— Afc.a} 

wc get for all t9„ = {ri ^ a} that (p{n,x,X)X9i}a) 4- is a resolution resolution 
refutation of v*g^{'&a, A, p, di{n, x, X,S,)), which is just Cq. 

Theorem 7.1. Resolution refutation schemata are sound, i.e. if R is a resolu- 
tion refutation schema of a clause-set schema A then A is unsatisfiable. 

Proof. Immediate by Definition 1 7 . 1 71 and by Definition 17.91 □ 

Let us remark here that unsatisfiability of schemata is a property which is 
not semi-decidable even for prepositional schemata (see [2])- 



8 The CERES Method for First-Order Schemata 

In this section we will consider the problem of cut-elimination for proof schemata. 
Note that trivially, for every 7 g N we can obtain a cut-free proof of 5(7) by 
computing ^ which contains cuts, and then applying a usual cut-elimination 
algorithm. What wc are interested in here is rather a schematic description of 
all the cut-free proofs for a parameter n. It is not possible to obtain such a de- 
scription by naively applying Gentzen-stylc cut-elimination to the LKS^-proofs 
in since it is not clear how to handle the case 



r h A, c c, n h A 
r,n h A,A 



cut 



as this would require "moving the cut through a proof link" . In this paper, 
we will go a different route: we will define a CERES method, which will be 
based on a global analysis of the proof schema. It will eventually yield the 
desired schematic description of the sequence of cut-free proofs, as expressed by 
Theorem [Hm 



8.1 The Characteristic Term 

At the heart of the CERES method lies the characteristic clause set, which 
describes the cuts in a proof. The connection between cut-elimination and the 
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characteristic clause set is that any resolution refutation of the characteristic 
clause set can be used as a skeleton of a proof containing only atomic cuts. 

The characteristic clause set can either be defined directly as in [5] , or it can 
be obtained via a transformation from a characteristic term as in [5]. We use 
the second approach here; the reason for this will be explained later. 

Our main aim is to extend the usual inductive definition of the characteristic 
term to the case of proof links. This will give rise to a notion of schematic 
characteristic term. The usual definition of the characteristic term depends 
upon the cut-status of the formula occurrences in a proof (i.e. whether a given 
formula occurrence is a cut-ancestor, or not). But a formula occurrence in a 
proof schema gives rise to many formula occurrences in its evaluation, some 
of which will be cut-ancestors, and some will not. Therefore we need some 
machinery to track the cut-status of formula occurrences through proof links. 
Hence we call a set of formula occurrences from the end-sequent of an LKS^- 
proof TT a configuration for tt. 

We will represent the characteristic term of a proof link in our object lan- 
guage: For all proof symbols ip and configurations we assume a unique symbol 
cl''''^ called clause-set symbol. The intended semantics of cl''''^(a) is "the char- 
acteristic clause set of ip{a), with the configuration fl". 

Definition 8.1 (Characteristic term). Let tt be an LKSg-proof and il a con- 
figuration. In the following, by Tq, and Fc, Ac we will denote multisets of 
formulas of 17- and cut-ancestors respectively. Let p be an inference in tt. We 
define the clause-set term Qp{TT,n) inductively: 

• if p is an axiom of the form Fn,rcr h Ao,Ac,A, then Op(7r,Jl) = 
[Fn,rch An,Ac] 

• if p is a proof link of the form — i^i^^^i^j ■_■ :_^a)) — then define fi' 

Fn,Fc,Fh Aji,Ac,A 
as the set of formula occurrences from Fo, Tc ^ Aji, Ap and Qp{TT, fl) = 

cl''''^ (a,xi, . . . ,Xa) 

• if p is a unary rule with immediate predecessor p', then 0p(7r, fJ) = 

• if p is a binary rule with immediate predecessors pi , p2 , then 

— if the auxiliary formulas of p are Q- or cut-ancestors, then Qp{n, fl) = 

ep,(7r,rj)®ep,(7r,f]), 

— otherwise 6p(7r, fi) = Qp^ (tt, fi) Bp^ (tt, il). 

Finally, define 9(7r, $7) — 9p(,(7r, $7), where po is the last inference of tt, and 
G(7r) = Q{tt, 0). 8(7r) is called the characteristic term of tt. 

Example 8.1. Let us consider the proof schema ^I*' of the sequent {yx){P{x) D 
P(/(x))) h (P(/(n,c)) D P{g{n,c))) 3 (F(c) D P(,9(n,c))), which is a regu- 
larized version of the proof schema 5* defined in Example 16.11 (the first-order 
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variables xo,Xk+i are replaced by x{0),x{k + 1) respectively). We have two 
relevant configurations: for ip and = {h (Vx)(P(x) D P{f{n,x)))} for ip. 
The characteristic terms of '3/ for these configurations are: 

e(7ri, 0) = [P(/(0, x(0))) h P(/(0, x(0)))] © ([h P(c)] © ([P(/(0, c)) h] ® [h])) 

e(i.i(fc),0) = ci'/''"(fc + i)©([hP(c)]©([p(/(fc + i,c))H®[M)) 
e{7r2,n) = [p(/(o,x(o)))hP(/(o,x(o)))] 

Q{v2{k),n) ^ cf-^{k)(B{[P{x{k + l))hP{xik + l))]® 

([P(/(fc, X(fc + 1))) H [h P(/(fc + 1, .T(fc + 1)))])) 

We say that a clause-set term is normal if it docs not contain clause-set 
symbols and defined function and predicate symbols. Now wc define a notion 
of characteristic term schema: 

Definition 8.2 (Characteristic term schema). Wc define the rewrite rules for 
clause-set symbols for all proof symbols -0^ and configurations 51: 

cl'^^'"(0, XI, ... , x^) ^ Q{TTp,n), c\^^''\k + 1, XI, ... , x„) ^ Q{i^p{k),n), 

for all 1 < /? < a. Next, let 7 G N and let cl''''''^ be a normal form of 
cl''''''^(7, xi, . . . ,Xa) under the rewrite system just given extended by rewrite 
rules for defined function and predicate symbols. Then define O('0/3, ^) = cl''"'''^ 
and 0(\E',r2) = O('0i,J7) and finally the schematic characteristic term 0(^') = 

e(*,0). 

We say that a clause-set symbol cl''''^ depends on a clause-set symbol cF'^^ , 
if a term Q{ip, fl) contains cl'''^^ . We assume that the dependency relation is 
transitive and refiexive. 

The following proposition shows that the definition of the characteristic term 
schema satisfies the requirement of Definition 17.81 

Proposition 8.1. Let be a proof schema and 0(^') be a characteristic term 
schema of . Then 0(5') is strongly normalizing. 

Proof. It is clear that the rewrite rules for defined function and predicate sym- 
bols are strongly normalizing, since they arc primitive recursive. Also, the 
rewrite rules of the clause-set symbols for which the dependency relation is 
acyclic, arc strongly normalizing. 

Now assume cl''''''^ depends on cl''^^ '^^ for some i j. This means that there 
is a proof link in Vii^k) to ipj explicitly or implicitly (i.e in i^i(fc) there is a proof 
link to "041 1 in i^ii (k) there is a proof link to tpi.-^ and so on. Finally, in (fc) 
there is a proof link to ipj)- In both cases, cl'''^'^^ cannot depend on cl"''"^^ by 
the definition of proof schemata. So assume for some ipp G ^, cl'^'^' depends 
on cl''''''^ and vice versa. Then the rewrite rules of cl'^"'" and cl'^"'"' are still 
strongly normalizing, since the parameter is strictly decreasing by the definition 
of proof schemata. □ □ 
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Example 8.2. Let's consider the proof schema ^' and clause-set terms defined 
in Example 18. II Then the characteristic term schema of is (cl'^'", cl"^'^) with 
the rewrite system: 

cr'»(o) ^ [P(/(o, x{o))) h p(/(o, x(o)))] © ([h p(c)] © ([P(/(o, c)) H © H)) 

cF'®(A: + l) ^ cl"'''^^(fc + l)©([hP(c)]©([P(/(fc + l,c))h]®H)) 

cl'^'"(0) ^ [P(/(0,a:(0)))hP(/(0,a;(0)))] 

cl''''''(fc + l) ^ cl'^^''(fc)©([P(a;(fc + l)) hP(a;(fc + l))]© 

([P(/(fc, x(fc + 1))) H © [h P(/(fc + 1, + 1)))])) 

Now we can explain why we chose to define the characteristic clause set via 
the characteristic term: The clause-set term is closed under the rewrite rules 
we have given for the clause-set symbols, while the notion of clause set is not 
(a clause will in general become a formula when subjected to the rewrite rules). 
Now, we prove that the notion of characteristic term is well-defined. 

Proposition 8.2. Let 7 G N and fl be a configuration, then Q{ipp,n) ],j is a 
normal clause-set term for all 1 < P < a. Hence 6(^) is a normal clause-set 
term. 

Proof. We proceed analogously to the proof of Proposition 16.11 □ □ 

Next, we show that evaluation and extraction of characteristic terms com- 
mute. We will later use this property to derive results on schematic character- 
istic clause sets from standard results on (non-schematic) CERES. 

Proposition 8.3. Let be a configuration and 7 G N. Then 6(^' 4-77^) = 

e(*,r!)i^. 

Proof. We proceed by induction on 7. If 7 = 0, then 4-0, ~ 0(7''i,ri) 

and e(*,rj) ;o= e(7ri,rj). 

IHl: assume 7 > and for ah /3 < 7, 9(^' l/j, fi) = e(^', Q.) ip. We proceed 
by induction on the number a of proof symbols in ^. 

Let a = 1. By the definition of characteristic term, constructions of 0(5' 4-7 
,H) and 0(4', f2) 4-^ differ only on proof links, i.e. if {il}i{k,xi, . . . ,xi)) is a 
proof link in z^i(fc), then by the definition of evaluation of proof schemata, 
0('i/'i 4-71 contains the term ^{ipi and by the definition of evaluation 

of characteristic term schemata, 0(5', fi) 4-7 contains the term 0(4', f]') 4-/3- 
Then by the assumption Q{ipi X/s,^') = 0(4/, f2') 4-^ and we conclude that 

©(V-i 17,^2) = 0(4',r2);7. 

Now, assume a > 1 and the proposition holds for all proof schemata with 
proof symbols less than a (IH2). Again, for proof links in z^i(fc) of the form 
{'ipi{k, xi, . . . , xi)) the argument is the same as in the previous case. Let (V't(a, xi, 
. . . ,xi)), 1 < t < a, be a proof link in z^i(fc). Then, again, by the definition of 
evaluation of proof schemata, Q{tpi 4-7, contains the term (^{tpL 4-a,^^') and 
by the definition of evaluation of characteristic term schemata, 0(4^, 51)4-7 '^o^" 
tains the term 0(<?, i}') 4,a, where = ((tt,,, Vi{k)), . . . , {'na,Va{k))) . Clearly, ^ 
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contains less than a proof symbols, then by IH2, 6(1/', ,|,a, = ^')ix and 
we conclude that e(?/>i i^, fi) = 8(*, fi) i^. □ □ 

From the characteristic term we finally define the notion of characteristic 
clause set. For an LKSg-proofTr and configuration O, CL(7r, 17) — |8(7r, f2)|. We 
define the standard characteristic clause set CL(7r) = CL(7r, 0) and the schematic 
characteristic clause set CL(vI',17) = |6(*,17)| and CL(vI') CL(vI',0). 

Example 8.3. Let's consider the characteristic term schema defined in Exam- 
plelO Then the sequence of CL(*)|o, CL(*)|i, CL(*)|2, ■ ■ ■ is: 

{P(xo) h P(xo) ; h P(c) ; P{c) h}, 

{P(xo) h P(xo) ; P(/(xi)) h P(/(xi)) ; P{x,) h P(/(xi)) ; h P(c) ; P(/(c)) h}, 

{P(xo) h P(xo) ; P(/(a;i)) h P{f{x,)) ; P{f{f{x2))) h P{f{f{x2))) ; 

P(a;i) h P(/(.Ti)) ; P(/(.T2)) h P{f{f{x2))) ; h P(c) ; P(/(/(c))) h}, . . . 

After tautology deletion and subsumption the sequence of CL(4')4,^ for 7 > 
boils down to {P{xi) h P(/(a;i)); h P(c); P{P{c)) h} 

Now we prove the main result about the characteristic clause set and lift it 
to the schematic case. 

Proposition 8.4. Let it he a normal'LK.Sg -proof. Then CL(7r) is unsatisfiable. 

Proof. By the identification of normal LKS^-proofs with LK-proofs, the result 
follows from Proposition 3.2 in [5]. □ □ 

Proposition 8.5. CL(\E') is unsatisfiable for all j G N (i.e. CL{'ii) is 
unsatisfiable). 

Proof By Propositions US] and O CL(5') CL(«',0) ;„= CL(* ;„,0) = 
CL(4' la) which is unsatisfiable by Proposition [SHI □ □ 

8.2 Projections 

The next step in the schematization of the CERES method consists in the defi- 
nition of schematic proof projections. The aim is, in analogy with the preceding 
section, to construct a schematic projection term that can be evaluated to a 
set of normal LKS^-proofs. As before, we introduce formal symbols represent- 
ing sets of proofs, and again the notion of LKSg -proof is not closed under the 
rewrite rules for these symbols, which is the reason for introducing the notion 
of projection term. 

For our term notation we assume for every rule p of LKSf a corresponding 
rule symbol that, by abuse of notation, we also denote by p. Given a unary rule 
p and an LKSg-proof tt, there are different ways to apply p to the end-sequent 
of tt: namely, the choice of auxiliary formulas is free. Formally, the projection 
terms we construct will include this information so that evaluation is always 
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well-defined, but we will surpress it in the notation since the choice of auxiliary 
formulas will always be clear from the context. 

For every proof symbol ip and configuration fi, we assume a unique proof 
symbol pr'^'^. Now, a projection term is a term built inductively from sequents 
and terms pr'^'^(a), for some arithmetic expression a, using unary rule symbols, 
unary symbols w^^"^ for all sequents F h A and binary symbols ©, ©o- for all 
binary rules a. The symbols pr'''"^ are called projection symbols. The intended 
interpretation of pr''''^(a) is "the set of characteristic projections of ip{a), with 
the configuration ft" . 

Definition 8.3 (Characteristic projection term). Let tt be an LKSg-proof and 
fl an arbitrary configuration for tt. Let Fo,Af2 and Fc,Ac be multisets of 
formulas corresponding to fl- and cut-ancestors respectively. We define a pro- 
jection term 5p(7r, fi) inductively: 

• If p corresponds to an initial sequent S, then we define Sp(7r, 17) ~ S. 

• If p is a proof link in tt of the form: — (V'(a_7_^ii_- ^•^^)_) — then, 

rjj,Fc.,Fh An,Ac,A 
letting il' be the set of formula occurrences from Fsi, F^ h A^, Ap, define 
Sp(7r,17) ^pT:'^^^'{a,Xi,...,Xa). 

• If p is a unary inference with immediate predecessor p', then: 

— if p is £ rule or the auxiliary formula(s) of p are Q- or cut-ancestors, 
then Sp(7r, n) = Ep, (tt, n), 

— otherwise Sp(7r, il) = p(Sp' (tt, fi)). 

• If cr is a binary inference with immediate predecessors pi and p2, then: 

— if the auxiliary formulas of a are fl- or cut-ancestors, let F^ h A^ be 
the ancestors of the end-sequent in the conclusion of pi, for i = 1,2, 
and define: E^{Tr,n) = w^^^^^{Ep,{Tr,n)) Q) w^^^^^{Ep^{7r,n)), 

— otherwise Ec{n, fi) = Ep^ (tt, fl) Ep^ (tt, f2). 

Define S(7r, fl) ~ Ep^{T:, f2), where po is the last inference of tt. 

We say that a projection term is normal if it does not contain projection 
symbols. 

Example 8.4. Let's consider the proof schema 5*' and configurations defined 
in Example 18.11 We introduce the following abbreviations: 

A = {Vx){P{x)D P{f{x))) 

B{n) = c)) D F(.9(n, c))) D (P(c) D P{g{n, c))) 

B^{n) ^ P{f{n,c))D P{g{n,c)) 

B2{n) = P{gin,c)) 

Then the projection terms of ^E*' for those configurations are: 
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S(7ri,0) = «;^^W(u;,(P(/(0,.T(0)))hP(/(0,a;(0)))))© 



w 



Ah 



^P(c)H(p(y(o^ c)) h P(/(0, c)) ^(9(0, c)) h P(.g(0, c)))))) 

y,P(c)h (p(j(^ + 1, c)) h P(/(fc + 1, c))®3, 

P(.g(fc + l,c))hP(.g(fc + l,c)))))) 
S(7r2,l]) = zi;K^(/(0,a;(0)))hP(/(0,.T(0)))) 

w^^{Pix{k + 1)) h F(.T(fc + 1)))© 
w^i\fi{P{f{k, x{k + 1))) h P{f{k, x{k + 

P(/(fc + 1, x{k + 1))) h P(/(fc + 1, x(fc + 1))))))) 

We now define the projection-set schema, which is compatible with the re- 
spective definition for clause-set terms. 

Definition 8.4 (Projection-set schema). We define the rewrite rules for pro- 
jection term symbols for all proof symbols "0^ and configurations il: 

pr'^'^'^(0,xi,...,x„) -^2(^^,17), pr'^^'f^(fc + l,xi,...,x„) 

for all 1 < /3 < a. Next, let 7 g N and let pr''''^^^^ J,^ be a normal form of 
pr''''^'^(7, xi, . . . ,Xa) under the rewrite system just given extended by rewrite 
rules for defined function and predicate symbols. Then define D.) = pr'^''-^ 

and E!(^',r2) = S('0i,f2) and finally the schematic projection term S(^) = 
S(*,0). 

Proposition 8.6. Let ft be a configuration and 7 G N. Then = 



Proof. We proceed as in the proof of Proposition 18. 31 □ □ 

We will define a map from normal projection terms to sets of normal LKSf- 
proofs. For this, we need some auxiliary notation. The discussion regarding the 
notation for the application of rules from the beginning of this section applies 
here. 

Definition 8.5. Let p be a unary and a a binary rule. Let (p, it be LKSg-proofs, 
then p{ip) is the LKSg -proof obtained from ip by applying p, and (y{p>, tt) is the 
proof obtained from the proofs ip and tt by applying a. 

Let P,Q be sets of LKSf-proofs. Then p(P) = {p(7r) | tt G P}, P^^^ = 
{n^^'^ I TT G P}, where tt'"'"^ is tt followed by weakenings adding F h A, and 
Px^Q^ {a{p, tt) \ p e P,Tr e Q}. 

Definition 8.6. Let S be a normal projection term. Then we define a set of 
normal LKSg-proofs |S| in the following way: 

• \AhA\ = {Ah A}, 
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• |p(S)| = for unary rule symbols p, 

• |Si ©S2I = |Si| U IS2I, 

• |Si (S)^ S2I = |Si| Xg- IS2I for binary rule symbols cr. 

For normal LKSg-proofs tt and configurations ft we define PR(7r, il) = |S(7r, 17)1 
and the standard projection set PR(7r) = PR(7r, 0). For 7 G N we define 

The following result describes the relation between the standard projection 
set and characteristic clause set in the normal case. It will allow us to construct, 
together with a resolution refutation of CL(5'), essentially cut-free proofs of S{j) 
for all 7 € N. Finally, the result is lifted to the schematic case. 

Proposition 8.7. Let n be a normal LKSg-proo/ with end-sequent S, then 
for all clauses C G CL(7r), there exists a normal hJiS £ -proof n G PR(7r) with 
end-sequent S o C . 

Proof. By the identification of normal LKS^-proofs with LK-proofs, the result 
follows from Definition 18.61 and Lemma 3.1 in [S]. □ □ 

Proposition 8.8. Let 7 G N, then PR(*4,^) = PR(*) i^. 

Proof. This result follows directly from Proposition 18.61 □ □ 

Proposition 8.9. Let 7 G N, then for every clause C G CL{'ii) there exists 
a normal LiKSs -proof tt G PR(5')4,'y with end-sequent C o £'(7). 

Proof By Proposition [531 CL(*) CL(* i^), and by Proposition [5^ 

PR(*) 1^ = PR(vl/ 1^). Then the result follows from Proposition [H21 since 
\E'4,-y has end-sequent 5(7) by definition. □ □ 

8.3 ACNF Schema 

To produce an Atomic Cut Normal Form, we need to transform a resolution 
refutation into an LKS^-proof skeleton. Then the ACNF is produced by sub- 
stituting each clause at the leaf nodes of this skeleton by the corresponding 
projections and appending necessary contractions at the end of the proof. 

Definition 8.7 (Transformation). Let g he a. ground resolution refutation. 
Then the transformation TR{g) is defined inductively: 

• a g = C for a clause C, then TR{g) = C, 

• li g = r{gi; g2] P), then TR{g) is: 
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{TR{gi)) iTR{g2)) 
rhA,p,...,p p,...,p,nhA 

■c-.r* c: U 



ThA,P P,nhA 

r,nh A,A 

Example 8.5. Let us compute the ACNF of the proof schema 4* defined in 
Example 16.11 First we should give a resolution refutation schema for the char- 
acteristic clause set defined in Example 18.31 Let R~ {{q,S),TZ), where TZ is the 
following rewriting system: 



g{0,x) ^ r(5(0,x-); P(/(0,c))h; P(/(0,c))), 

Q{k + l,x) ^ r(J(fc + l,x); P{f{k + 1, c)) h; P(/(fc + 1, c))), 

(5(0, x) ^ P{c), 

5{k + l,x) ^ r{5{k, x); P{x{k + 1)) h P{f{x{k + 1))); P(/(fc, c))) 

Next we define a predecessor function. Let pre : w ^ a; be a defined function 
symbol, then we define function pre{n) with the rewrite rules pre(O) — and 
pre{k + 1) — fc. Now we define the V2-substitution 6 = {x \k.f{pre{k), c)}; 
then g(n,x)9 4,-y is a resolution refutation schema for all 7 e N. Finally, we 
compute TR{g{n,x)0Xo): 



^ Pjc) P{c) h ^ 
p cut 

and ACNF of * for n = is (we denote the sequent S'(O) : (yx){P{x) D 
P{f{x))) h (P(c) D P(.9(0,c))) D (P(c) D P(5(0,c))) with A h B): 





P(c) h P( 








c)),P(c) h 


-P(c 


),^'(!?(0,c)) 


J'(c) D P(s(0,c)) h P(c), 


P(c) 


3 -P(9(0,c)) 



P(c) h P(e) P(g(0, c)) I- P(g(0, c)) 

P(c) D P(g(0,c)),P(c) h P(g(0,c)) 

P(e), P(e) 3 P(g(0, c)), P(c) h P(g(0, c)) 

P(c) D P(g(0.c)),P(c) h P(c) D P(g(0,c)) 
D : r — D : I 



l-P(c),B P(c) h S 

UJ ; / w ; Z 

A\- P(c),B P{c),Al-B 

- cut 
c : r 



A, A h 



(Va;)(P(:r) D P(/(2:))) h (P(c) D P(g(0, c))) D (P(c) D P(g(0, c))) 

Finally, we can summarize the CERES method of cut-elimination for proof 
schemata by defining the whole CERES-proccdure CERES-s on schemata (where 
is a proof schema) : 

Phase 1 of CERES-s: (schematic construction) 

• compute CL(5'); 

• compute PR(*); 
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• construct a resolution refutation schema R = {{gi, . . . , £>^), TZ) of CL(4'), 
and a Vc-substitution A and a V2-substitution 9 according to Dcfinition l7.17l 

Phase 2 of CERES-s: (evaluation, given a number a) 

• compute CL(5')|q; 

• compute PR(4')|q.; 

• compute gi{n,x,X)Xd-la and : TR{gi{n,x, X)X6 -la)', 

• append the corresponding projections in PR(\I') ],a to Tq, and propagate 
the contexts down in the proof. 

Theorem 8.1. Let "if be a proof schema with end-sequent S{n). Then the 
evaluation of CERES-s produces for all a a ground LKSg-proo/Tr of S{a) 
with at most atomic cuts such that its size |7r| polynomial in \gi{n,x,X)X9 la 
|-|PR(*)U |. 

Proof. Let a G N. By Proposition 18 .81 we obtain for any clause in Ca ■ CL(^') J,q, 
a corresponding projection of the ground proof ipa in PR(^) la- Let R = 
{{gi, . . . , gi3),TZ) be a resolution refutation schema for CL(^') constructed in 
phase 1 of CERES-s and Ta the corresponding tree. Clearly the length of any 
projection is at most |PR(\E') 4,ct | and \Ta\ is polynomial in gi{n., x, X)X0 la- 
Moreover, the resulting proof Tr^ of S{a) obtained in the last step of phase 2 
contains at most atomic cuts. □ 



9 Open Problems 

The current results obtained by CERESs can be considered as a first step of 
performing cut-elimination in inductive proofs. Currently our formalism ad- 
mits just one parameter and thus is not capable of modeling nested inductions. 
Hence a generalization of the method to several parameters is highly desirable. 
While the construction of the schematic characteristic clause sets and of the 
schematic proof projections is fully mechanizable (and already implemcntec(^ 
a fully automated construction of schematic resolution refutations is impossible 
even in principle. However, for practical proof analysis of nontrivial proofs an 
interactive use of the schematic resolution calculus and a formal verification of 
the obtained proofs would be vital. The current schematic resolution method 
is very strong and the computation of the schematic most general unifiers is 
undecidable. It would be useful to also search for weaker systems admitting a 
higher degree of automation which are still capable of formalizing relevant prob- 
lems. Towards an interpretation of the datastructures of CERES in practical 
applications, further work needs to be done: In [11] it was shown that Herhrand 
sequents are a useful tool for the interpretation of formal proofs by humans. In 
the context of the present work, a suitable notion of schematic Herbrand sequent 

^http: //www. logic ■ at/ceres/system/gapt .html| 
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should be defined and it should be shown how to extract such a sequent from 
the data structures used by CERES (i.e. from a resolution refutation schema of 
CL(vI/), and from PR(vI')). A concrete application of CERESs would be the full 
formalization and verification of the schematic analysis of Fiirstcnbcrg's proof 
of the infinity of primes shown in [i]. In this paper the CERES method was 
applied to an infinite sequence of proofs; the sequence of characteristic clause 
sets was found empirically and the refutation of the infinite sequence of charac- 
teristic clause sets was performed on the mathematical meta-level. In contrast 
CERESs is capable of defining the schematic characteristic clause sets C„ and 
the projections fully automatic and provides a formalism for refuting C„ for- 
mally. We believe that (the current implementation of) CERESs can also serve 
as tool for a semi-automated development of proof schemata by mathematicians. 
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